Skip to content
OpenAdvisories
High ICSA-25-140-02 5 CVEs

National Instruments Circuit Design Suite

Published May 20, 2025 · Updated May 20, 2025

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose information or execute arbitrary code.

Vulnerabilities 5

  • High 7.8

    Out of Bounds Write in Library!DecodeBase64() in NI Circuit Design Suite

    There is a memory corruption vulnerability due to an out of bounds write in Library!DecodeBase64() when using the SymbolEditor in NI Circuit Design Suite.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploit…

  • High 7.8

    Out of Bounds Write in CheckPins() in NI Circuit Design Suite

    There is a memory corruption vulnerability due to an out of bounds write in CheckPins() when using the SymbolEditor in NI Circuit Design Suite.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requi…

  • High 7.8

    Out of Bounds Read in GetSymbolBorderRectSize() in NI Circuit Design Suite

    There is a memory corruption vulnerability due to an out of bounds read in GetSymbolBorderRectSize() when using the SymbolEditor in NI Circuit Design Suite.  This vulnerability may result in information disclosure or arbitrary code execution. Successful explo…

  • High 7.8

    Out of Bounds Read in Bitmap::InternalDraw() in NI Circuit Design Suite

    There is a memory corruption vulnerability due to an out of bounds read in Bitmap::InternalDraw() when using the SymbolEditor in NI Circuit Design Suite.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploita…

  • High 7.8

    Stack-based Buffer Overflow in DrObjectStorage::XML_Serialize() in NI Circuit Design Suite

    There is a memory corruption vulnerability due to a stack-based buffer overflow in DrObjectStorage::XML_Serialize() when using the SymbolEditor in NI Circuit Design Suite.  This vulnerability may result in information disclosure or arbitrary code execution. S…

Revision history

  1. #1

    Initial Publication

References